Login Control

Login Control defines the behavior of end-user login and sign-up pages, including page layout, account fields, authentication methods, and phone number region code policies. These settings determine whether users can register and log in with email, phone number, or username.

Path: Log in to the RootAuth console → open the target application → click Configuration in the top navigation bar → Application Management → Login Control

 

1. General Login Settings

In General Login, you can configure the login/sign-up page layout, automatic login after sign-up, account fields, and phone number region code policies.

1.1 Login and Sign-Up Page

Mode	Description
Separate login and sign-up pages	Login and sign-up are displayed as separate pages. Users register first and then log in.
Unified login and sign-up page	Login and sign-up are handled on one page for a simpler authentication experience.

 

1.2 Automatic Login After Sign-Up

After this option is enabled, users are automatically logged in after successful sign-up and redirected to the login callback URL.

After this option is disabled, users need to return to the login flow manually after signing up.

2. Configure Account Fields

Account fields control which account identifiers users can use for sign-up and login.

Account field	Authentication method	For login	For sign-up	Description
Email-email	Password	Can be enabled	Can be enabled	Supports email and password login/sign-up.
Email-email	Verification code	Can be enabled	Can be enabled	Supports email verification code login/sign-up.
Phone-phone	Password	Can be enabled	Can be enabled	Supports phone number and password login/sign-up.
Phone-phone	Verification code	Can be enabled	Can be enabled	Supports phone number verification code login/sign-up.
Username-username	Password	Can be enabled	Can be enabled	Supports username and password login/sign-up.

 

2.1 Selection Rules

• If For sign-up is enabled for an account field, RootAuth automatically enables the corresponding For login option.
• When sign-up is enabled, login cannot be disabled separately.
• You can enable For login only without enabling For sign-up. This is useful when existing users can log in with the field, but new users cannot register with it.

 

3. Phone Number Region Code Policy

When phone-number-related login or sign-up is enabled, you can configure the region code policy.

Setting	Default	Description
Allowed sign-up/binding region codes	+86 China	Users can only select these region codes when signing up or binding a phone number in user details.
Allowed login region codes	Global	Users can only select these region codes when logging in with a phone number.

Multiple region codes can be selected. Options include +86 China, +852 Hong Kong, China, +853 Macao, China, +886 Taiwan, China, and Global.

If the sign-up region code policy and login region code policy are different, and the unified login/sign-up page is used, the page follows the Allowed login region codes policy.

When a user uses SMS MFA for the first time and needs to bind a phone number, the phone number region code also follows the Allowed login region codes policy.

All changes take effect only after you click Save at the bottom of the page.

 

4. Phone Number Uniqueness Rules

Phone numbers are unique within the current application. After a user binds a phone number, they can use that phone number as an account alias to log in.

Keep the following rules in mind:

1. A phone number that has already been bound cannot be used to register again.
2. A phone number already used by another account cannot be bound to the current user.
3. An email address already used by another account cannot be bound to the current phone-number account.

If the phone number or email already exists, RootAuth shows the corresponding duplicate-field message.

 

 

5. Username Configuration

Username configuration controls how usernames are generated for registration methods other than username registration, as well as the allowed username format during registration.

5.1 Automatically Generate Usernames

5.1.1 Main Switch

Setting	Default	Description
Automatically generate usernames	Off	When enabled, RootAuth automatically generates a random username when users register with a non-username method, such as email or phone number.

5.1.2 Generation Rule Type

After you enable automatic username generation, select either of the following methods from the tabs:

Method	Description
Prefix + random string	Enter a prefix and RootAuth appends a random string of the specified length.
Custom rule	Enter a rule template containing the # placeholder. RootAuth replaces # with random characters.

5.1.3 Prefix + Random String

Setting	Rule
Prefix	Optional. Supports only letters, numbers, underscores (_), and hyphens (-), with a maximum of 20 characters. An invalid value shows a validation error.

5.1.4 Custom Rule

Setting	Rule
Rule template	Required. The placeholder is user-#. Supports letters, numbers, *, and -; # represents random characters. The template can contain only one #, and the rule length excluding # cannot exceed 20 characters.

5.1.5 Shared Settings

The following settings apply to both generation methods:

Setting	Default	Range or rule
Character length	12	Set with the slider or number input, from 4 to 32. This length applies only to randomly generated characters, excluding a prefix or fixed characters in the rule template.
Character type	Letters + numbers	Choose Letters + numbers, Letters only, or Numbers only.

RootAuth displays a live username preview and provides a Copy button. In Prefix mode, the preview is the prefix plus a random string. In Custom rule mode, RootAuth replaces # with a random string using the selected length and character type.

 

5.2 Username Registration Format

This configuration is always displayed in a collapsed state and does not depend on whether Username - Password is enabled for registration.

Setting	Default	Rule
Minimum character length	4	The minimum value is 4. A value lower than 4 shows: Minimum length cannot be less than 4.
Maximum character length	52	The maximum value is 52. A value higher than 52 shows: Maximum length cannot exceed 52.
Format rule	Letters + numbers	Choose Letters + numbers, Letters only, or Numbers only.
Allow special characters (-, _)	Off	When enabled, usernames can include hyphens (-) and underscores (_).

6. Preview Sign-Up/Login

After completing the configuration, click Preview Login/Sign-Up in the upper-right corner to preview the login and sign-up pages of the current application.

The preview page follows these settings:

1. Page layout, account fields, authentication methods, and region code policies in Login Control.
2. Logo and application name in Application Configuration.
3. Registration security policies in Security Settings.
4. Authorization mode in Protocol Configuration.

After application settings are changed, they may take up to 2 minutes to take effect on both the preview page and end-user pages.